ISE 1.4 "ip phones frequent registration"

[mamdohmardini]

we have a cisco ip phones connected to switch ports configured for dot1x wired authentication, ISE is configured to bypass authentication for ip phones. the switch used is Cisco 6880ia.  

[m.ranger]

Hi,

I have a similar issue. Few phones of my deployment work for some days and suddenly begin to frequently restart and unfinite cycle in registering to cucm and then rebooting.

I have 8841/8845 Phones and 802.1x authentication by certificate.

Did you get solved your problem?

Best regards

Manfred

[nspasov]

Hi Manfred, I have a couple of questions:

1. What type of switch and version of code are you running?

2. Do you have idle and/or re-auth timer configured in your authorization policy for the IP Phones

Thank you for rating helpful posts!

[mamdohmardini]

sorry for the late response, please find my answers:

1- cisco 6800ia-48fpd,  and this is the image on the parent switch: /c6880x-ipservicesk9-mz.SPA.152-1.SY0a.bin

2- here is the port configuration

authentication host-mode multi-auth

 authentication order dot1x mab

 authentication priority dot1x mab

 authentication port-control auto

 authentication periodic

 authentication timer reauthenticate server

 mab

 dot1x pae authenticator

 dot1x timeout tx-period 10

spanning-tree portfast

thank you passing by

[mamdohmardini]

not solved. i removed the dot1x configuration, we are not using it anymore.